tapd-story-clarification
TAPD 需求澄清技能。从 TAPD 提取"规划中"状态的需求，按照研发最佳实践对需求进行 多维度澄清（业务逻辑、外部系统交互、上下文），整合项目背景知识，输出符合需求文档 规范的标准化 Markdown 需求文档，并回写 TAPD。 Use this skill whenever the user mentions 需求澄清, 澄清需求, clarify story, clarify requirement, 需求细化, 需求整理, 需求规范化, 补充需求, 完善需求描述, story clarification, requirement clarification, 需求文档整理, or any workflow involving TAPD story description refinement and standardization.
74
93%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The workflow reads requirements from TAPD via MCP where story descriptions and comments can be authored by external users, presenting an indirect prompt injection risk.
- Repository
- TencentBlueKing/bk-bcs
- Commit
9544047
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.